Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32312e302f32342d3234203d3e20323636313433.roa
File:                     3136302e32302e32312e302f32342d3234203d3e20323636313433.roa (raw, json)
Hash identifier:          BRdtvJgxuCIYkoF0Op0rWKrzRHWL7QxGf84+UzHCEgM=
Subject key identifier:   CE:63:0D:EE:B6:E9:C1:6B:21:5E:99:C6:7E:D8:19:CE:BC:C5:E1:E1
Certificate issuer:       /CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
Certificate serial:       5760612C95C832D0049CDB4D2D42E77D2B48ED75
Authority key identifier: B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32312e302f32342d3234203d3e20323636313433.roa
Signing time:             Fri 26 Apr 2024 13:50:21 +0000
ROA not before:           Fri 26 Apr 2024 13:45:21 +0000
ROA not after:            Fri 25 Apr 2025 13:50:21 +0000
asID:                     266143
IP address blocks:        160.20.21.0/24 maxlen: 24

Validation:               Failed, certificate revoked on Wed 05 Jun 2024 19:34:14 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:60:61:2c:95:c8:32:d0:04:9c:db:4d:2d:42:e7:7d:2b:48:ed:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2
        Validity
            Not Before: Apr 26 13:45:21 2024 GMT
            Not After : Apr 25 13:50:21 2025 GMT
        Subject: CN=CE630DEEB6E9C16B215E99C67ED819CEBCC5E1E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:21:1f:f4:9d:23:76:f4:26:da:e8:4c:3c:98:
                    64:cd:38:59:d0:80:04:3d:5c:68:cd:a9:57:9c:be:
                    3b:18:c7:7b:bf:58:3c:32:7c:1b:61:8b:96:b5:b1:
                    d0:a5:8e:c9:4c:49:8c:c1:fd:ea:a4:19:70:1b:2c:
                    32:00:db:de:d4:d2:40:1b:c6:34:1f:a6:44:46:3a:
                    45:85:ad:0e:bc:43:80:97:9e:15:77:3d:6d:11:fa:
                    39:52:26:28:42:d2:d3:53:50:ee:9c:cd:f7:51:af:
                    f4:3e:03:81:a3:73:1f:d3:21:08:62:40:af:04:33:
                    d2:d9:06:f4:01:83:2d:e1:77:29:c7:19:35:22:93:
                    1a:6e:db:29:3b:78:1c:c4:7b:fa:5a:d7:d4:2e:72:
                    5f:ed:b0:46:ec:c3:78:88:eb:94:47:12:e4:fc:98:
                    05:22:cd:4a:0d:ba:71:2b:b7:7c:fc:18:34:ce:b7:
                    7b:d0:bc:4a:1d:2c:20:75:e2:9b:32:f4:ec:71:aa:
                    b2:db:55:01:7a:d8:14:35:56:d7:b9:0d:1b:e4:e9:
                    5b:a0:e9:08:31:5d:3b:2e:62:31:08:80:83:05:8b:
                    bd:57:a5:16:0c:17:d2:46:75:e0:57:c7:ce:15:30:
                    36:96:8c:0a:bd:9c:63:53:09:02:7d:48:92:c7:9d:
                    ff:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:63:0D:EE:B6:E9:C1:6B:21:5E:99:C6:7E:D8:19:CE:BC:C5:E1:E1
            X509v3 Authority Key Identifier:
                keyid:B4:02:2F:9C:6A:00:6A:A6:CF:0F:6C:3A:F5:C0:A2:4B:BE:14:B0:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/B4022F9C6A006AA6CF0F6C3AF5C0A24BBE14B0A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4L5mpLjMy53gRPj9ACmLL4mLP13tbf64N9Ee18sUjKTd/0/3136302e32302e32312e302f32342d3234203d3e20323636313433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.21.0/24

    Signature Algorithm: sha256WithRSAEncryption
         8d:42:2c:f3:f1:61:0b:8d:89:27:bf:94:6e:2f:57:ea:f1:49:
         fe:3c:2e:3a:9f:da:cc:3a:54:89:af:35:6a:a8:06:7f:91:32:
         bb:41:03:10:71:b0:90:3d:ee:84:5a:46:91:7d:7b:e2:8c:20:
         43:d0:d1:ff:fe:2b:17:af:f8:bb:a7:ec:67:41:dc:35:4f:8e:
         37:28:fe:95:6d:22:77:85:16:51:aa:ff:3b:ad:ae:65:c3:7c:
         c9:a7:08:d9:34:85:d2:eb:0c:36:2d:84:f5:5d:0e:09:38:86:
         41:67:9e:ef:33:81:5c:93:39:ca:a2:d5:1f:3a:52:38:01:e8:
         c7:27:0d:62:1f:37:29:26:c7:a8:5d:f9:68:fc:c8:18:6c:3e:
         83:30:52:e2:92:60:e6:39:b9:3f:fe:f0:1f:fa:b3:f0:0e:77:
         1a:9d:96:1c:c9:fe:73:3e:1f:2c:7b:0c:9a:36:b9:30:8d:3e:
         05:c8:73:b3:e2:e3:ba:b2:6d:bc:c4:2e:d6:57:04:f3:df:10:
         bf:66:a3:1f:46:ec:46:bb:50:ea:bc:05:86:1b:0a:21:68:c2:
         d2:e5:d9:91:e0:e6:e5:62:11:f2:3b:fc:01:03:08:bf:7c:f3:
         19:90:37:e7:02:ed:98:2c:db:a2:20:e0:57:65:64:b9:25:56:
         b2:85:84:dd
-----BEGIN CERTIFICATE-----
MIIFRTCCBC2gAwIBAgIUV2BhLJXIMtAEnNtNLULnfStI7XUwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQjQwMjJGOUM2QTAwNkFBNkNGMEY2QzNBRjVDMEEyNEJC
RTE0QjBBMjAeFw0yNDA0MjYxMzQ1MjFaFw0yNTA0MjUxMzUwMjFaMDMxMTAvBgNV
BAMTKENFNjMwREVFQjZFOUMxNkIyMTVFOTlDNjdFRDgxOUNFQkNDNUUxRTEwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDIR/0nSN29Cba6Ew8mGTNOFnQ
gAQ9XGjNqVecvjsYx3u/WDwyfBthi5a1sdCljslMSYzB/eqkGXAbLDIA297U0kAb
xjQfpkRGOkWFrQ68Q4CXnhV3PW0R+jlSJihC0tNTUO6czfdRr/Q+A4Gjcx/TIQhi
QK8EM9LZBvQBgy3hdynHGTUikxpu2yk7eBzEe/pa19Qucl/tsEbsw3iI65RHEuT8
mAUizUoNunErt3z8GDTOt3vQvEodLCB14psy9OxxqrLbVQF62BQ1Vte5DRvk6Vug
6QgxXTsuYjEIgIMFi71XpRYMF9JGdeBXx84VMDaWjAq9nGNTCQJ9SJLHnf/fAgMB
AAGjggJPMIICSzAdBgNVHQ4EFgQUzmMN7rbpwWshXpnGftgZzrzF4eEwHwYDVR0j
BBgwFoAUtAIvnGoAaqbPD2w69cCiS74UsKIwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vNEw1bXBMak15NTNnUlBqOUFDbUxMNG1MUDEzdGJmNjROOUVlMThzVWpL
VGQvMC9CNDAyMkY5QzZBMDA2QUE2Q0YwRjZDM0FGNUMwQTI0QkJFMTRCMEEyLmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8xL0I0MDIyRjlDNkEwMDZBQTZD
RjBGNkMzQUY1QzBBMjRCQkUxNEIwQTIuY2VyMIGsBggrBgEFBQcBCwSBnzCBnDCB
mQYIKwYBBQUHMAuGgYxyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
LzRMNW1wTGpNeTUzZ1JQajlBQ21MTDRtTFAxM3RiZjY0TjlFZTE4c1VqS1RkLzAv
MzEzNjMwMmUzMjMwMmUzMjMxMmUzMDJmMzIzNDJkMzIzNDIwM2QzZTIwMzIzNjM2
MzEzNDMzLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEH
AQH/BBAwDjAMBAIAATAGAwQAoBQVMA0GCSqGSIb3DQEBCwUAA4IBAQCNQizz8WEL
jYknv5RuL1fq8Un+PC46n9rMOlSJrzVqqAZ/kTK7QQMQcbCQPe6EWkaRfXvijCBD
0NH//isXr/i7p+xnQdw1T443KP6VbSJ3hRZRqv87ra5lw3zJpwjZNIXS6ww2LYT1
XQ4JOIZBZ57vM4FckznKotUfOlI4AejHJw1iHzcpJseoXflo/MgYbD6DMFLikmDm
Obk//vAf+rPwDncanZYcyf5zPh8sewyaNrkwjT4FyHOz4uO6sm28xC7WVwTz3xC/
ZqMfRuxGu1DqvAWGGwohaMLS5dmR4OblYhHyO/wBAwi/fPMZkDfnAu2YLNuiIOBX
ZWS5JVayhYTd
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org